{"ip":"104.250.184.80","data_as_of":"2026-10-24T09:55:21+00:00","observed":true,"total_events":278,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"107+ ports swept","confidence":"medium","network_type":null,"why":["No exploit payloads observed.","Swept 107 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"92,778 bytes sent","bytes_sent":92778,"session_seconds":51,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-13T08:11:53","last_seen":"2026-10-14T13:09:42","events_24h":0,"events_7d":0,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":202412,"org":"Omegatech LTD"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"udp":null,"interaction":null,"top_ports":[{"port":46000,"proto":"tcp","label":"","count":9},{"port":61000,"proto":"tcp","label":"","count":9},{"port":34000,"proto":"tcp","label":"","count":7},{"port":61443,"proto":"tcp","label":"","count":7},{"port":56000,"proto":"tcp","label":"","count":7},{"port":43443,"proto":"tcp","label":"","count":7},{"port":53443,"proto":"tcp","label":"","count":6},{"port":56443,"proto":"tcp","label":"","count":6},{"port":41000,"proto":"tcp","label":"","count":6},{"port":11111,"proto":"tcp","label":"","count":6},{"port":4436,"proto":"tcp","label":"","count":6},{"port":38000,"proto":"tcp","label":"","count":5},{"port":53000,"proto":"tcp","label":"","count":5},{"port":40443,"proto":"tcp","label":"","count":5},{"port":62000,"proto":"tcp","label":"","count":5}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i251000_b78ed14e2fd0_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["416eca07dcaad72dec6f76d1277b3eff"],"http_akin":["b11cun050_0004001e_00ecc3a8"],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{"t13i251000_b78ed14e2fd0_ab7e3b40a677":98,"b11cun050_0004001e_00ecc3a8":82},"akin_families":{"b11cun050_0004001e_00ecc3a8":{"head":"b11cun050_0004001e_00ecc3a8","shapes":3,"ips":82}},"user_agents":["Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.6 Mobile/15E148 Safari/604.1","Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36","Mozilla/5.0 (Macintosh; Intel Mac OS X 13_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1 Safari/605.1.15","Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/3.6.17","Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0","Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36","Mozilla/5.0 (X11; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0"],"timeline":[{"date":"2026-10-13","count":174},{"date":"2026-10-14","count":104}],"recent_events":[{"timestamp":"2026-10-14T13:09:42","port":12443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:12443\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/auth.html","summary":"","payload_hex":"474554202f617574682e68746d6c20485454502f312e310d0a486f73743a20<HONEYPOT>3a31323434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132362e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","ja3":"416eca07dcaad72dec6f76d1277b3eff","session":"1e0a1ad9-1350-4a04-8bb9-a3557f508a1d","seq":1,"duration_ms":246,"bytes_in":241,"bytes_out":79},{"timestamp":"2026-10-14T13:09:41","port":2000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:2000\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/auth.html","summary":"","payload_hex":"474554202f617574682e68746d6c20485454502f312e310d0a486f73743a20<HONEYPOT>3a323030300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31382e32205361666172692f3630352e312e31350d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Safari/605.1.15","ja3":"416eca07dcaad72dec6f76d1277b3eff","session":"c0ecad04-2cce-400f-bb95-8e8cc0ef0a7f","seq":1,"duration_ms":1266,"bytes_in":240,"bytes_out":79},{"timestamp":"2026-10-14T13:01:47","port":3000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:3000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/auth.html","summary":"","payload_hex":"474554202f617574682e68746d6c20485454502f312e310d0a486f73743a20<HONEYPOT>3a333030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f39322e302e343531352e313037205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36","ja3":"416eca07dcaad72dec6f76d1277b3eff","session":"c951ac7e-2fe8-4bc2-9e5d-313317a7ca98","seq":1,"duration_ms":505,"bytes_in":238,"bytes_out":79},{"timestamp":"2026-10-14T12:57:17","port":16000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:16000\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10) AppleWebKit/537.36 (KHTML, like Gecko) Version/8.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/auth.html","summary":"","payload_hex":"474554202f617574682e68746d6c20485454502f312e310d0a486f73743a20<HONEYPOT>3a31363030300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f313029204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f382e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10) AppleWebKit/537.36 (KHTML, like Gecko) Version/8.0 Safari/537.36","ja3":"416eca07dcaad72dec6f76d1277b3eff","session":"16926880-f53c-46bf-97eb-9657745d9396","seq":1,"duration_ms":421,"bytes_in":235,"bytes_out":79},{"timestamp":"2026-10-14T12:32:10","port":22443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:22443\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/auth.html","summary":"","payload_hex":"474554202f617574682e68746d6c20485454502f312e310d0a486f73743a20<HONEYPOT>3a32323434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020285831313b204c696e7578207838365f363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132312e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36","ja3":"416eca07dcaad72dec6f76d1277b3eff","session":"1272c4aa-991d-49d6-8ac6-c5381bbec014","seq":1,"duration_ms":266,"bytes_in":225,"bytes_out":79},{"timestamp":"2026-10-14T12:17:14","port":1000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:1000\",\"user-agent\":\"Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/auth.html","summary":"","payload_hex":"474554202f617574682e68746d6c20485454502f312e310d0a486f73743a20<HONEYPOT>3a313030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202843656e744f533b204c696e7578206936383629204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132382e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36","ja3":"416eca07dcaad72dec6f76d1277b3eff","session":"f4c599e4-c1c6-4227-8d27-2c0a31943227","seq":1,"duration_ms":488,"bytes_in":226,"bytes_out":79},{"timestamp":"2026-10-14T12:11:06","port":6000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:6000\",\"user-agent\":\"Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.1 Safari/605.1.15\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/auth.html","summary":"","payload_hex":"474554202f617574682e68746d6c20485454502f312e310d0a486f73743a20<HONEYPOT>3a363030300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73682c20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3630352e312e313520284b48544d4c2c206c696b65204765636b6f292056657273696f6e2f31362e31205361666172692f3630352e312e31350d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.1 Safari/605.1.15","ja3":"416eca07dcaad72dec6f76d1277b3eff","session":"be474a09-fd06-4276-91a0-94d58f6b35fe","seq":1,"duration_ms":623,"bytes_in":241,"bytes_out":79},{"timestamp":"2026-10-14T12:11:02","port":9443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:9443\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/auth.html","summary":"","payload_hex":"474554202f617574682e68746d6c20485454502f312e310d0a486f73743a20<HONEYPOT>3a393434330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3131372e302e302e30205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","ja3":"416eca07dcaad72dec6f76d1277b3eff","session":"14f56ee2-67c2-4cb8-98f9-c59b3db705bc","seq":1,"duration_ms":1216,"bytes_in":240,"bytes_out":79},{"timestamp":"2026-10-14T12:08:33","port":20443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:20443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.93 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/auth.html","summary":"","payload_hex":"474554202f617574682e68746d6c20485454502f312e310d0a486f73743a20<HONEYPOT>3a32303434330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f39362e302e343636342e3933205361666172692f3533372e33360d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.93 Safari/537.36","ja3":"416eca07dcaad72dec6f76d1277b3eff","session":"84a065bb-ca4d-44e7-b66d-61c6d48c521a","seq":1,"duration_ms":105,"bytes_in":238,"bytes_out":79},{"timestamp":"2026-10-14T12:07:57","port":1000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en\",\"host\":\"<HONEYPOT>:1000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2; Win64; x64; rv:109.0) Gecko/20100101 Firefox/112.0\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/auth.html","summary":"","payload_hex":"474554202f617574682e68746d6c20485454502f312e310d0a486f73743a20<HONEYPOT>3a313030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b2057696e36343b207836343b2072763a3130392e3029204765636b6f2f32303130303130312046697265666f782f3131322e300d0a4163636570743a202a2f2a0d0a4163636570742d4c616e67756167653a20656e0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2; Win64; x64; rv:109.0) Gecko/20100101 Firefox/112.0","ja3":"416eca07dcaad72dec6f76d1277b3eff","session":"e8918250-aa88-4336-9bf9-86070965568e","seq":1,"duration_ms":788,"bytes_in":202,"bytes_out":79}],"http_methods":[{"method":"GET","count":278}],"distinct_ports_total":107,"top_paths":[{"path":"/auth.html","count":160,"ports":103},{"path":"/vpn/index.html","count":28,"ports":27},{"path":"/RDWeb/","count":26,"ports":26},{"path":"/login?redir=%2F","count":23,"ports":21},{"path":"/logon/LogonPoint/custom.html","count":21,"ports":20},{"path":"/logon/LogonPoint/index.html","count":20,"ports":19}],"distinct_paths_total":6,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Accept-Language","value":"en","notable":false},{"name":"Host","value":"<HONEYPOT>:12443","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[]}